Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: MlEYJNNhGGMAzYgUp7XKyi1HuhLc1XFyKwZqRtMYcd4=
Subject key identifier: A9:4B:61:52:90:70:DA:11:7E:01:8B:B5:67:57:64:A7:73:AF:E3:69
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 0196C9BB759865162667DF9B91DC65503867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 0451
Signing time: Tue 13 May 2025 13:00:27 +0000
Manifest this update: Tue 13 May 2025 13:00:27 +0000
Manifest next update: Wed 14 May 2025 13:00:27 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: qNm5x97NPZ/Eu+5JPMKVgDV57A5n7Wpageh31RyMLsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:75:98:65:16:26:67:df:9b:91:dc:65:50:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: May 13 13:00:27 2025 GMT
Not After : May 14 13:00:27 2025 GMT
Subject: CN=a94b61529070da117e018bb5675764a773afe369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:24:d5:8a:25:a0:eb:b3:15:e6:43:0c:1f:
d4:8d:db:29:cc:92:59:5b:46:ac:01:2f:c8:68:b1:
6e:13:e5:4e:1a:f1:3c:b2:aa:59:2c:40:3e:d5:5c:
d9:96:af:af:77:4c:e9:d6:f2:e3:09:98:d3:4d:83:
29:85:32:f2:ad:62:f9:32:c7:16:d2:35:78:78:1a:
fb:13:41:ab:d7:eb:27:b1:b6:3b:b9:9d:0b:8c:1d:
86:f8:00:50:2c:1f:78:d6:cc:74:41:6f:b2:fa:08:
84:77:81:f1:12:c3:16:cd:9f:5c:7c:cb:80:4d:51:
8f:78:28:5b:9e:cd:98:0b:1c:26:3a:28:19:33:f1:
cb:ed:4a:7d:96:61:1e:93:40:17:b6:38:55:40:e9:
cd:3a:4d:59:bd:02:73:90:5b:4c:6c:9e:ff:96:5f:
da:48:21:ac:ce:d6:99:c3:4b:a8:0e:fd:f8:f7:c5:
2b:f5:f5:10:d9:f9:43:92:cc:bc:36:86:03:7b:3a:
97:96:16:54:c0:eb:d4:1a:21:c7:5f:df:59:e4:22:
8c:19:4c:84:02:5d:9d:4b:02:64:a7:2e:9a:43:82:
34:f5:4d:60:09:41:d9:ce:67:05:c2:39:fc:54:f0:
4f:9d:b0:8c:71:09:f5:5b:8a:2f:dd:55:60:19:36:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:61:52:90:70:DA:11:7E:01:8B:B5:67:57:64:A7:73:AF:E3:69
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:b9:66:2c:e0:de:e4:6c:c4:f7:92:f4:93:b0:99:39:f2:
40:f7:9c:06:f5:d7:93:15:8d:16:5f:cd:ba:d5:e3:32:98:1d:
36:76:8f:80:09:26:e0:87:ed:8d:11:ba:f3:bb:2b:1c:d5:fd:
a2:b1:7d:bf:03:d7:15:3f:55:0f:03:5f:19:cd:ba:8f:45:df:
ae:04:ad:1f:cb:62:83:26:f2:f5:d5:52:59:57:fa:bb:6e:b0:
25:fc:79:7b:65:37:e2:e9:c6:b8:44:d5:57:e9:b8:68:d7:84:
33:6e:55:7c:53:f1:e9:4b:75:9f:72:cf:8b:96:93:e9:17:45:
91:01:dd:45:3f:16:0c:fe:cc:e1:5b:ae:a3:03:a6:66:9a:0d:
14:a6:52:d4:2b:98:a5:8e:71:46:84:84:6b:bc:ec:8d:e7:7c:
36:7f:a8:d5:14:ed:33:d8:f5:b4:03:e8:07:36:e6:66:f8:6e:
bd:7b:b9:6d:cf:64:2e:cc:9e:7f:e2:f7:4d:bf:44:70:1c:29:
af:f6:56:e1:3e:5d:fd:2f:e6:b7:00:8f:35:d4:68:06:d6:40:
07:54:9d:6a:88:80:e6:a8:17:3b:a2:db:9a:8e:10:21:92:7a:
04:e7:0c:3b:5f:9a:a4:d1:70:3e:69:b9:b6:80:4e:bc:24:84:
15:8e:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:48:05 2025 by rpki-client